Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
File:                     iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer (raw, json)
Hash identifier:          UeYAAAWP1eKsUCF0SBMKSRq7CWix8nuwPH8FWM6wsts=
Subject key identifier:   89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D80303ABBFC14EEB2F4BD435F5FBAD
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:49:06 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 193.187.156.0/22
                          IP: 2a09:c80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d8:03:03:ab:bf:c1:4e:eb:2f:4b:d4:35:f5:fb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=893a58124ce9cc43783955255e7f583905cdb14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:a6:55:89:11:ed:4c:98:f8:9d:24:4a:46:
                    99:ac:62:a6:91:20:9e:36:84:6f:c9:ed:62:10:08:
                    5a:14:e6:b8:b0:c1:25:00:26:08:84:d0:e0:0c:07:
                    5c:3b:a4:74:6a:6e:18:63:7b:e4:15:b4:1c:11:a6:
                    1d:37:89:20:b9:a4:b5:42:e3:c0:62:b0:5d:d6:fd:
                    95:8f:b2:16:8e:43:f5:fe:6c:b3:0a:48:d9:11:18:
                    b2:18:42:cd:b6:fb:df:62:34:13:4a:62:14:c3:6c:
                    7c:79:19:c8:67:66:e5:c2:4c:af:52:6a:bb:d4:d0:
                    45:1e:71:07:af:b3:e2:e2:03:90:f6:02:4c:3c:29:
                    c9:4d:d3:01:8f:6b:5e:74:4c:4f:62:28:dd:b4:8d:
                    3a:91:e5:44:36:6c:56:f7:ce:ac:1b:54:6c:10:4c:
                    ee:b8:ef:ae:71:e3:c6:17:dc:d1:68:25:cf:ed:81:
                    e9:d1:9e:a6:a4:36:10:70:24:38:02:44:d0:94:b9:
                    42:2b:13:26:d4:a4:39:71:83:4a:e8:26:26:58:ed:
                    6d:87:24:2c:cf:20:2b:b9:68:d7:45:7e:27:01:27:
                    cd:f1:dc:5f:6d:2d:6b:a4:a0:10:b5:e7:09:6e:ae:
                    36:52:70:9b:4a:a6:35:b6:cb:7f:c5:6f:a0:25:f2:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.156.0/22
                IPv6:
                  2a09:c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:1e:fe:35:25:19:20:a8:58:af:b7:c3:7d:f7:f2:00:08:
         f0:29:aa:bb:4c:7f:2d:1b:1c:26:df:6b:65:78:70:0e:c5:92:
         9d:12:49:0d:9c:94:90:2a:3e:df:f3:1a:b1:0a:cf:4c:d1:2c:
         02:11:11:36:18:f7:16:4b:1c:13:fa:6b:e9:b4:0f:e2:38:ed:
         14:51:05:de:d0:70:ea:a5:90:7b:19:2f:11:ee:9c:7b:d8:c7:
         85:68:e1:65:4e:3d:0d:5f:12:e5:a4:3c:dd:82:73:66:27:da:
         69:18:48:7c:3d:23:f9:6c:eb:9b:33:ad:6e:00:08:ab:c2:28:
         d1:37:ee:6a:dc:55:80:62:6e:27:db:89:f7:43:29:bd:82:49:
         da:bd:76:80:63:bd:90:72:47:42:9c:e0:a3:60:be:4c:a5:77:
         98:c5:cf:e4:27:9a:88:ea:48:34:7d:b9:3e:bd:7b:57:3a:46:
         f0:af:90:7c:0d:9b:9d:93:8e:bf:6b:14:b8:ce:53:71:0b:13:
         7e:5a:a6:c3:d6:3d:46:c4:e5:74:cc:3e:09:3c:61:06:38:08:
         f4:73:79:3d:82:31:83:ff:0c:76:dc:b8:2c:0f:ae:63:d8:1d:
         f7:63:bc:c3:a1:61:18:15:6b:64:e8:36:fc:c1:60:3b:12:11:
         6a:09:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----